Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We
also use these cookies to improve our products and services, support our marketing
campaigns, and advertise to you on our website and other websites. Some cookies may continue
to collect information after you have left our website.
Learn more (including
how to update your settings) here.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the
license provided by that third-party licensor. Splunk is not responsible for any third-party
apps and does not provide any warranty or support. If you have any questions, complaints or
claims with respect to this app, please contact the licensor directly.

With 10 minutes setup, you will get a monitoring solution, that includes log aggregation, performance and system metrics, metrics from the control plane and application metrics, a dashboard for reviewing network activity, and alerts to notify you about cluster or application performance issues.

An application requires Collectord built by Outcold Solutions, see https://www.outcoldsolutions.com/docs/monitoring-openshift/

Overview

Outcold Solutions provide solutions for monitoring Kubernetes, OpenShift and Docker clusters in Splunk Enterprise and Splunk Cloud. We offer Splunk applications, which give you insights across all containers environments. We are helping businesses to reduce complexity related to logging and monitoring by providing easy-to-use and deploy solutions for Linux and Windows containers. We deliver applications to help developers monitor their applications and operators to keep their clusters healthy. With the power of Splunk Enterprise and Splunk Cloud, we offer a unique solution to help you keep all the metrics and logs in one place, allowing you to quickly address complex questions on container performance and cluster health.

Description

We provide solutions for monitoring Kubernetes, OpenShift and Docker clusters in Splunk Enterprise and Splunk Cloud. With 10 minutes setup, you will get a monitoring solution, that includes log aggregation, performance and system metrics, metrics from the control plane and application metrics, a dashboard for reviewing network activity, and alerts to notify you about cluster or application performance issues.
All our solutions are powered by the Collectord, a container-native software built by Outcold Solutions that provides capabilities for discovering, transforming and forwarding logs, collecting system metrics, collecting metrics from the control plane of the orchestration frameworks and forwarding network activity. Collectord provides flexible and powerful tools for transforming logs. With our software you can hide sensitive information from the loglines before forwarding them. With Collectord you can reduce the licensing costs associated with logging aggregation by choosing which data you want to forward from the log streams. Collectord forwards container logs, host logs and can discover logs written by the containerized applications.

Use cases

Application Monitoring

See detailed metrics from containers and processes, including performance metrics, utilization metrics and security insights. Forward application-specific metrics, exported in Prometheus format. Use prebuilt Splunk dashboards for a comprehensive overview.

Log Aggregation

Aggregate logs from containers, applications, and servers. Use flexible mappings to filter logs enriched with container metadata, correlate logs with metrics, and leverage Splunk capabilities for analyzing logs. Use Collectord to transform logs before they reach Splunk, remove sensitive information, remove PII data to help keep your logs GDPR compliant. With Collectord you can reduce licensing and storage costs by choosing which loglines you want to forward.

Cluster Health Monitoring

Diagnose cluster issues by looking at historical events, monitoring allocations, and regulating cluster capacity. Leverage pre-built alerts for monitoring the health of the clusters out of the box.

Reduce complexity and improve productivity

Use one tool to collect and forward logs and metrics required by developers for reviewing performance and health of their applications. With the annotations developers can define how they want to see the data in log aggregation tool, specify multiline log patterns, removing terminal escape codes, override types, sources and indexes.

- New: Dashboard Review -> Projects. Review allocations and requests for Projects and pods.- Fixed: openshift_stats_cpu_request_percent - is divided by the number of CPU.

Collectord updates:- Fixed: Interval 0 in Prometheus input can crash the collectord.- Fixed: When both glob and match are set for the application logs, the glob pattern can block the match pattern fromfinding the files in the volume.

- Fixed: Improved Workload dashboard. Allows to filter by namespace, see all Pods in a specific namespace, filter by workload label.- New: Alert for showing when Collectord reports errors in Processing pipelines (as an example if it failed to extract fields).- New: Alert for showing when Collectord reports warnings.- Fixed: Add node labels filter to Storage Dashboard and Control Plane Dashboards.- New: Alert if lag in the indexing of the data.- New: Splunk Usage (License usage, number of events) report under Setup.- Fixed: misprint in Builds dashboard.- Fixed: adjusted high amount of errors to Kubernetes API dashboard to make it less verbose.

- New: Review/Storage dashboard based on storage metrics and PVC metrics.- New: predefined alerts to help you monitor the health of the clusters and performance of the applications.- Fixed: Performance improvements...

For details https://www.outcoldsolutions.com/docs/monitoring-openshift/release-history/

Version 5.2.179

Oct. 17, 2018

5.2.179 - 2018-10-17- Fixed: changed search time for few alerts that cause false positives with indexing lag on large installations

- New: Review/Storage dashboard based on storage metrics and PVC metrics.- New: predefined alerts to help you monitor the health of the clusters and performance of the applications.- Fixed: Performance improvements...

For details https://www.outcoldsolutions.com/docs/monitoring-openshift/release-history/

- New: Review/Storage dashboard based on storage metrics and PVC metrics.- New: predefined alerts to help you monitor the health of the clusters and performance of the applications.- Fixed: Performance improvements...

For details https://www.outcoldsolutions.com/docs/monitoring-openshift/release-history/

Version 5.1.175

Sept. 17, 2018

- New: Network metrics (MB, Packets, Drops and Errors) for host and containers.- New: Network socket tables (list of port that containers and hosts are listen on, connections to external resources).- New: Network review dashboard to see the list of connection to public services and in private network.- Improvement: Replace python-based lookup with macro written with eval.- Improvement: Visual improvement for showing when the object was Last Seen (highlighting and showing minutes ago).... and more

Version 5.0.174

For more details:https://www.outcoldsolutions.com/docs/monitoring-openshift/release-history/

Version 4.0.24

May 15, 2018

- New dashboard: Cluster/Audit- New dashboard: Cluster/API Server- New dashboard: Cluster/Controller- New dashboard: Cluster/Kubelet- New dashboard: Cluster/etcd- Include image name, when list containers.- Added syslog component to the list of host logs.- Fixed: Include Daemon Set on Overview dashboard, list of projects.- Fixed: Broken navigation from the list of deployments.

AppInspect Tooling

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Splunk®, Splunk>®, Listen to Your Data®, The Engine for Machine Data®, Hunk®, Splunk Cloud™, Splunk Light™, SPL™ and Splunk MINT™ are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners.